[asterisk-users] AMI Permissions, "all" means different things?

[Johan Wilfer]

Hi!

I'm trying to limit the permissions for a AMI-account. But I'm a little 
bit confused by the permissions. The commands I use are (output from 
"manager show commands", btw: privilege col seems cropped?):

   Action           Privilege        Synopsis
   Redirect         call,all         Redirect (transfer) a call.
   Originate        originate,all    Originate a call.
   Getvar           call,reporting,  Gets a channel variable.


If I put this in my manager.conf:

[pbx_ami]
secret = ***
deny=0.0.0.0/0.0.0.0
permit = x.x.x.x/255.255.255.255
write=originate,call
read=


I get this ("manager show user pbx_ami"):

        username: pbx_ami
          secret: <Set>
             acl: yes
       read perm: <none>
      write perm: call,originate,all
displayconnects: yes



Where does the "all" permission come from? However, If I change the row 
in manager.conf to "write=originate,call,all" the output is:

        username: pbx_ami
          secret: <Set>
             acl: yes
       read perm: <none>
      write perm: 
system,call,log,verbose,command,agent,user,config,dtmf,reporting,cdr,dialplan,originate,agi,cc,aoc,test,all
displayconnects: yes


Can someone explain this please?

Thanks!

-- 
Johan Wilfer